WordPress Plugin Vulnerabilities

Peter's Login Redirect <= 2.9.0 - Cross-Site Scripting (XSS) & CSRF

Description

The Peter's Login Redirect WordPress plugin was affected by a Cross-Site Scripting (XSS) & CSRF security vulnerability.

Affects Plugins

Plugin icon
peters-login-redirect
Fixed in 2.9.1

References

CVE
CVE-2016-10925
URL
https://seclists.org/fulldisclosure/2016/Aug/69
URL
https://sumofpwn.nl/advisory/2016/cross_site_scripting_cross_site_request_forgery_in_peter_s_login_redirect_wordpress_plugin.html

Miscellaneous

Submitter
ethicalhack3r
Submitter twitter
ethicalhack3r
Verified
No
WPVDB ID
eddbebc8-3546-4e16-a36c-64a1bd27ff70

Timeline

Publicly Published
2016-08-15 (about 9 years ago)
Added
2016-08-16 (about 9 years ago)
Last Updated
2020-09-22 (about 5 years ago)

Other

Published
Title
Published
2020-02-24
Title
Ultimate Membership Pro < 8.6.2 - Multiple CSRF Issues via AJAX Calls, Insufficient Filename Entropy
Published
2014-08-01
Title
WP Cycle Playlist - Multiple Vulnerabilities
Published
2014-08-01
Title
FoxyPress 0.4.2.5-0.4.2.8 - Multiple Vulnerabilities
Published
2019-02-23
Title
WP Human Resource Management <= 2.2.5 - Multiple Issues
Published
2016-05-18
Title
Fluid Responsive Slideshow <= 2.2.6 - CSRF & XSS